Privacy Policy

1. Introduction

St Mary's Dental Practice (“we”, “us”, or “our”) is committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, and protect your personal information when you use our website or services.

We are the data controller for the personal data you provide to us. Our practice is located at 34a St Mary's Street, Stamford, PE9 2DS.

2. Information We Collect

We may collect the following types of personal information:

• Identity Data: Name, title, date of birth
• Contact Data: Email address, telephone numbers, postal address
• Health Data: Medical and dental history, treatment records, X-rays and photographs
• Financial Data: Payment card details, bank account information
• Technical Data: IP address, browser type, pages visited, time spent on site
• Communication Data: Correspondence via email, phone, or contact forms

3. How We Use Your Information

We use your personal data for the following purposes:

• To provide dental treatment and care
• To manage your appointments and send reminders
• To process payments and maintain financial records
• To communicate with you about your dental care
• To comply with legal and regulatory requirements (GDC, CQC, NHS)
• To improve our services and website
• To send marketing communications (with your consent)

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide dental services you have requested
• Legal obligation: To comply with healthcare regulations and tax laws
• Vital interests: To protect your health in emergency situations
• Consent: For marketing communications and non-essential cookies
• Legitimate interests: To improve our services and maintain security

5. Data Sharing

We may share your personal data with:

• NHS services and other healthcare providers involved in your care
• Dental laboratories for prosthetic work
• Specialist dental practitioners for referrals
• Payment processors for card transactions
• IT service providers who help us maintain our systems
• Regulatory bodies (GDC, CQC) when required
• Legal and professional advisers when necessary

We do not sell your personal data to third parties.

6. Data Retention

We retain your dental records in accordance with professional and legal requirements:

• Adult patient records: 10 years after last treatment
• Child patient records: Until the patient reaches 25 years of age, or 10 years after last treatment if longer
• Financial records: 7 years for tax purposes
• Marketing consent records: Until consent is withdrawn

7. Your Rights (GDPR)

Under UK GDPR, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data (subject to legal retention requirements)
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data to another provider
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent for marketing at any time

To exercise any of these rights, please contact us using the details below.

8. Data Security

We implement appropriate security measures to protect your personal data, including:

• Encrypted data transmission (SSL/TLS)
• Secure access controls and authentication
• Regular security assessments and updates
• Staff training on data protection
• Physical security measures at our premises

9. Cookies

Our website uses cookies to improve your experience. For detailed information about the cookies we use, please see our Cookie Policy.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us:

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk